One prompt could take over AWS AI agents, researchers say
Zenity Labs says a public agent on Amazon’s AgentCore handed over its cloud keys when a user asked for them. AWS says the research shows expected, documented behaviour, not a flaw.
Zenity Labs published research on October 8 showing that one chat message to a public AI agent on Amazon Bedrock AgentCore could reveal its temporary cloud keys. With them, the researchers say, an attacker could control every AgentCore agent in the same AWS account and region. Zenity says AWS has since narrowed the default permissions.